Connect to rdownloads.broadcom.com SSLHandshakeException error or java.net.UnknownHostException: rdownloads.broadcom.com

Products

• ACF2 - z/OS
• Top Secret
• Datacom
• COMMON PRODUCT SERVICES COMPONENT
• COMMON SECURITY SERVICES

Issue/Introduction

When connecting to the rdownloads.broadcom.com server, the connection may fail with:

• java.net.UnknownHostException: rdownloads.broadcom.com   
• javax.net.ssl.SSLHandshakeException

For example, SMP/E Internet Service receive order job connection to rdownloads.broadcom.com fails with SSLHandshakeException error.

The Orderserver processing shows that 96 FMIDs and 5789 PTFs were processed and order "ORD00004-17December2021-09.30.58.940" was created with file "/0934851/1352622/GIMPAF.XML".

The error occurs when connecting to the download server rdownloads.broadcom.com which fails with a SSLHandshakeException error.:

DATE 12/17/21  TIME 09:30:58              SERVER Data              SMP/E 36.112

 <SERVER
 host="rdownloads.broadcom.com"
 user="testuser"
 pw="****************************"
 >
 <PACKAGE
 file="/0934851/1352622/GIMPAF.XML"
 hash="520EB3FEB9F2C50C3A3C38CFDDB4C6F84379A792"
 id="ORD00004-17December2021-09.30.58.940"
 >
 </PACKAGE>
 </SERVER>

 --------------------------------------------------------------------------------
 DATE 12/17/21  TIME 09:30:58         SMP/E GIMJVCLT OUTPUT         SMP/E 36.112

 httpGetInit downloadKeyring="SMPE_KEYRING2" mvsuserid="testuser"

 
 smpeCC:01 smpeRoutine:GIMJVGIN smpeMsgLen:0000000000
 

 --------------------------------------------------------------------------------
 DATE 12/17/21  TIME 09:30:59         SMP/E GIMJVCLT OUTPUT         SMP/E 36.112

 httpGet fileUrl="https://rdownloads.broadcom.com/0934851/1352622/GIMPAF.XML" loc
 alFile="/product/CA/SMPNTS/ORD00004-17December2021-09.30.58.940/GIMPAF.XML" file
 User="testuser" filePw="****************************" retryCnt="10" retryInt="60"

Starting download from URL: https://rdownloads.broadcom.com/0934851/1352622/GIMPAF.XML
to local file: /product/CA/SMPNTS/ORD00004-17December2021-09.30.58.940/GIMPAF.XML javax.net.ssl.SSLHandshakeException: com.ibm.jsse2.util.j: PKIX path building failed: com.ibm.security.cert.IBMCertPathBuilderException: unable to find valid certification path to requested target

 

Environment

Release : 16.0

Component : ACF2 for z/OS

Resolution

The problem can be caused by:

1. The Broadcom Receive Order URL is not added to the Proxy "whitelist".
2. The connection to rdownloads.broadcom.com is failing because the there is an expired certificate(non-Broadcom Receive Order certificate) that was used by the proxy server. When the expired certificate was replaced with a certificate with valid expiry dates the SMP/E receive order job completed successfully.